noob question: Pulling configurations in CLI

[AXington]

I'm trying to pull the configuration of the firewall thru the CLI, I've not been able to find a command to do so. Is it actually possible?

[muttbarker]

Lots of different ways - one of the easiest is just to ftp to a server 

save ftp://userass@1.1.1.1.1/filename

(That should read user : pass - can't turn off smiley face insert)

You can also automate process to execute on commit - etc.... 

[AXington]

Not exactly what i'm looking for, what I'm trying to do is retrieve the current configuration of the firewall that's on the box (srx210) and analyze that data for security metrics. I want to see a list of open ports, allowed protocols, etc. I'd prefer to get it as an xml document so that I can parse all that data out of it.

[omoulton@adaptcom.c…]

Try show configuration | display xml. Adding | no-more will eliminuate the  ---(more)--- prompts.

[JunOS_Fan]

Hi,

to see the complete configuration - "root@srx>show configuration "

to see list of open ports ( like netstat -a output) , you may use "show system connections" operational mode , if you need the XML output  use | display xml , as mentioned in previous reply. 

In SRX, if you want to see what all protocols/services are enabled for inbound traffic, you may use - "show interfaces <int-name> extensive " and look for host-inbound-traffic